The TLS RFC specifies a PRF() function for the generation of the master secret:
master_secret = PRF(pre_master_secret, "master secret", ClientHello.random + ServerHello.random); Does OpenSSL publish an interface to this function (PRF)? On a similar note, does OpenSSL provide a PRF() interface to generate the session keys (client write MAC key, server write MAC key, client write encryption key, and server write encryption key), once the master secret has been generated? ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org